CVE-2026-19389

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-ugly (affected versions not specified)

Description Multiple integer overflow and underflow issues exist in the ASF demuxer (asfdemux) when parsing header objects from specially crafted ASF, WMV, or WMA files. Insufficient validation of length and size values controlled by an attacker allows the bypass of bounds checks, leading to out-of-bounds heap reads. This may result in an application crash, denial of service, or limited information disclosure during the processing of untrusted media.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.